Analyst I, Falcon Complete GovCloud (Hybrid, St. Louis)

Job description

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you. About the Role:CrowdStrike Falcon® Complete GovCloud is looking for highly motivated, self-driven, technical analysts dedicated to making a difference in global security by protecting government organizations against the most advanced attackers in the world. Our Falcon Complete GovCloud virtual security operations center offers opportunities to expand your skill set through a wide variety of experiences, detecting and responding to incidents as they occur in real time for our government and public sector customers. Analysts I operate exclusively within CrowdStrike's Federal Risk and Authorization Management Program (FedRAMP)-authorized GovCloud environment, supporting customers with heightened compliance, data sovereignty, and security requirements. This is the entry point into the Falcon Complete GovCloud analyst career path. At this level, you will apply intermediate-level cybersecurity and technical skills across incident handling, alert triage, security monitoring, threat detection, digital forensics, incident response management, and malware analysis, while building the advanced communication, analytical thinking, and problem-solving capabilities that define the Falcon Complete GovCloud standard of service. This position is open to candidates in St. Louis, MO. Am I a Falcon Complete GovCloud Analyst I Candidate? Do you find yourself interested in putting your hands-on technical skills to the test in detecting, containing, and remediating incidents within U.S. government and public sector environments? Are you self-motivated and looking for an opportunity to rapidly accelerate your skills while working within one of the most compliance-driven and mission-critical cybersecurity environments in the industry? Do you crave new and innovative work that directly supports the security of government organizations and the missions they serve? Do you have an incident response or information security background that you are not fully utilizing, particularly experience in or exposure to government, Department of War (DoW, formerly the Department of Defense), or intelligence community environments? Are you capable of communicating technical findings clearly to both technical teams and government customer management? Do you love working around mission-driven, smart people who you can learn from and mentor on a daily basis? What You'll Do: Execute alert triage across the Falcon Complete GovCloud environment at an intermediate proficiency level, developing complete triage strategies, managing multiple alert sources, implementing comprehensive investigation procedures, and developing detailed documentation, all within FedRAMP authorization boundaries and applicable federal compliance requirements. Operate the CrowdStrike Falcon Sensor within the GovCloud environment at an intermediate proficiency level, configuring sophisticated monitoring parameters across environments, analyzing security event patterns to identify potential threats, and adapting sensor capabilities to meet the varied security requirements of government and public sector customers. Implement and manage security monitoring and detection within the GovCloud environment at an intermediate proficiency level, developing complete monitoring solutions, implementing complex detection methods, managing multiple security tools, and developing custom detection rules. Apply threat detection capabilities within the GovCloud environment at an intermediate proficiency level, demonstrating growing independence in applying threat detection across familiar scenarios in support of government and public sector customer protection. Conduct digital forensics in support of customer incident response at an intermediate proficiency level, developing complete forensic strategies, managing multiple evidence sources, implementing comprehensive documentation frameworks, and developing detailed reports. Execute incident response management across the full incident lifecycle at an intermediate proficiency level, developing complete response strategies, implementing complex containment methods, managing evidence collection, and managing cross-team coordination, aligned to NIST SP 800-61 (Computer Security Incident Handling Guide) and applicable federal incident response frameworks. Perform malware analysis in support of customer incident response at an intermediate proficiency level, contributing effectively to malware analysis projects and offering practical suggestions to inform containment decisions and remediation planning. Operate the CrowdStrike Falcon platform user interface within the GovCloud environment at an intermediate proficiency level, performing investigations and triage, applying filters, generating reports, and using threat graphs to support incident response workflows for government and public sector customers. Apply intermediate-level technical troubleshooting within the GovCloud environment, handling complex technical issues independently, performing thorough root cause analysis, identifying patterns in recurring issues, and implementing preventive measures to reduce recurrence. Apply intermediate-level Linux administration knowledge within the GovCloud environment, managing complex Linux environments independently, implementing advanced system configurations, implementing automation through shell scripting, and maintaining security hardening standards. Apply intermediate-level Windows systems administration knowledge within the GovCloud environment, managing complex Active Directory structures independently, implementing and maintaining Windows security features and compliance requirements, and troubleshooting complex system issues. Communicate effectively with government and public sector customer management and internal stakeholders at an advanced proficiency level, communicating complex ideas with exceptional clarity and authority, anticipating the needs and motivations of others, and adapting messaging to guide conversations toward desired outcomes. Deliver high-quality presentations of technical findings and recommendations at an advanced proficiency level, presenting complex or high-stakes topics with clarity, authority, and persuasion, and adjusting in real time based on audience cues and feedback. Apply advanced problem-solving to GovCloud operational challenges, developing innovative solutions to complex problems, anticipating problems before they arise, and evaluating long-term impacts and broader implications of solutions. Manage time and workload effectively across concurrent incident response assignments at an intermediate proficiency level, demonstrating confidence in prioritization and adjusting approach based on context